Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File:                     PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier:          1MXLaKLDLgepGQnuvpBLOAl6VL1syMUws+eGl9a6YzE=
Subject key identifier:   EE:52:B5:3C:2B:AD:B3:38:F3:CE:1F:F2:66:C2:0A:72:D5:CA:6E:AE
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer:       /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial:       018F88926C29F7106DE57E0270332324E65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number:          0B70
Signing time:             Fri 17 May 2024 22:00:48 +0000
Manifest this update:     Fri 17 May 2024 22:00:48 +0000
Manifest next update:     Sat 18 May 2024 22:00:48 +0000
Files and hashes:         1: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: O4rxfTE5mDruzkF1ZvNDGQ96ahdK7P0tHzk7t8yjTRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:6c:29:f7:10:6d:e5:7e:02:70:33:23:24:e6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
        Validity
            Not Before: May 17 22:00:48 2024 GMT
            Not After : May 18 22:00:48 2024 GMT
        Subject: CN=ee52b53c2badb338f3ce1ff266c20a72d5ca6eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:8f:bf:4e:c9:e0:0c:69:88:83:c5:cc:cc:
                    3a:67:e5:cd:13:b6:31:cf:84:32:f4:cf:18:18:10:
                    f0:0b:a1:52:8f:5a:69:cf:ac:01:38:2f:6f:06:c6:
                    5a:27:b4:65:57:69:1e:4e:cd:72:b8:66:1d:cf:50:
                    98:c0:51:41:5c:e2:d9:52:1c:1b:3e:8b:fa:c0:c6:
                    c3:22:76:9d:9e:f2:b0:12:34:bd:bb:b3:dd:a9:b6:
                    34:c9:93:ae:fd:84:51:44:cb:74:cb:3d:ff:ac:7f:
                    9f:6e:ff:dc:df:db:3b:a4:ea:d2:8d:a4:ec:12:e4:
                    75:6d:cf:56:3f:27:ef:b8:b6:8c:e8:6a:0c:7f:44:
                    a8:b4:38:75:a5:7f:0f:f2:71:ea:0e:20:8b:a6:63:
                    12:dc:7a:20:fb:41:4c:ed:57:25:0d:53:ed:1f:07:
                    b3:fa:08:ee:90:b8:e8:ee:4d:bc:8b:69:a4:e6:3a:
                    a0:f9:4d:66:c8:9c:ec:4c:ee:f8:36:28:19:67:c1:
                    5b:6a:18:89:33:51:74:cf:06:7e:ab:e5:e1:0e:f1:
                    2e:b1:d5:e5:5e:33:9f:00:a0:6b:91:3f:d0:d6:c8:
                    bb:cc:5c:da:f4:26:ba:59:48:02:3e:88:38:e1:c3:
                    10:44:4e:e3:c2:d6:0f:79:f6:7d:64:cd:50:71:c2:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:B5:3C:2B:AD:B3:38:F3:CE:1F:F2:66:C2:0A:72:D5:CA:6E:AE
            X509v3 Authority Key Identifier:
                keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:98:09:12:28:6b:00:ca:d0:c1:3e:dd:e0:c1:ea:99:d6:09:
         92:8c:f6:5c:ef:f0:8f:74:b7:3f:1a:d8:de:5c:0e:c1:b3:1a:
         65:7e:47:96:7c:14:d3:2a:92:61:92:81:a0:67:30:67:3d:66:
         0d:61:24:a1:1b:8f:7f:1e:0b:f2:70:9f:bb:61:eb:66:7b:d3:
         e6:09:ca:dc:b3:c3:94:71:1b:35:bf:19:0d:37:33:f9:67:f6:
         2a:e2:73:20:af:dc:e7:6d:44:df:d3:fb:44:9a:a8:6a:b7:2d:
         13:08:00:e8:df:3d:90:aa:fd:75:76:03:a1:a9:9e:84:bd:f9:
         3d:0c:f8:bb:6b:46:52:d8:00:be:34:d1:8d:f9:9b:6f:43:c7:
         f5:a2:26:b0:df:b0:05:cd:be:70:bb:9b:96:20:5b:bf:4e:8d:
         0a:b2:b1:33:43:d5:7b:35:68:43:f3:e1:4c:6e:9b:8f:02:d9:
         fe:33:bc:f2:b3:d5:7f:ae:e4:e1:8a:67:e0:26:e0:7a:18:07:
         42:44:b7:13:a6:47:e6:00:da:0b:04:a1:9b:25:b4:89:a1:f3:
         45:6f:5e:75:85:50:6e:c8:e2:1b:9b:18:1c:78:3e:55:ec:fe:
         9a:78:5e:fb:ec:b2:0d:f3:95:2e:cc:bc:3e:76:ad:3e:a0:fc:
         ee:cd:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:12 2024 by rpki-client on console-fra.rpki-client.org